DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a1d934b7b4e7ec64b73a6ae3da1ab3c6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a1d934b7b4e7ec64b73a6ae3da1ab3c6_JaffaCakes118
Size
68KB
MD5
a1d934b7b4e7ec64b73a6ae3da1ab3c6
SHA1
0290b5757a776a674bc0e2b20f618e4f3ac190d6
SHA256
ba11498e8b0e1e063408062357c9ae1023f17924714a63fdca42396d7df7c2d4
SHA512
3787d6bb1ba6f7e8971083b9c3f15e5484c4d46a9f636e32463847aaa73d8b8a573c600168ee24b227192957084f799104fd45cb8f9225c3a266b8917aa6a539
SSDEEP
1536:oaqmrJvAGWkS4T8cTO6UligrTejSoQLrl:hhrJXhiGeigfloUh
Checks for missing Authenticode signature.
resource |
---|
a1d934b7b4e7ec64b73a6ae3da1ab3c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
WinExec
GetCurrentThreadId
Sleep
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
GetLastError
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
TlsAlloc
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
SysStringLen
LoadRegTypeLi
SysFreeString
VariantClear
ord30
ord58
ord32
ord57
ord18
ord15
ord16
ord21
ord23
ord31
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ